{"id":"https://openalex.org/W2888160480","doi":"https://doi.org/10.1109/tcss.2018.2857473","title":"Scenario-Based Insider Threat Detection From Cyber Activities","display_name":"Scenario-Based Insider Threat Detection From Cyber Activities","publication_year":2018,"publication_date":"2018-08-23","ids":{"openalex":"https://openalex.org/W2888160480","doi":"https://doi.org/10.1109/tcss.2018.2857473","mag":"2888160480"},"language":"en","primary_location":{"id":"doi:10.1109/tcss.2018.2857473","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcss.2018.2857473","pdf_url":null,"source":{"id":"https://openalex.org/S2490693980","display_name":"IEEE Transactions on Computational Social Systems","issn_l":"2329-924X","issn":["2329-924X","2373-7476"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computational Social Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010819780","display_name":"Pratik Chattopadhyay","orcid":"https://orcid.org/0000-0002-5805-6563"},"institutions":[{"id":"https://openalex.org/I56404289","display_name":"Indian Institute of Technology BHU","ror":"https://ror.org/01kh5gc44","country_code":"IN","type":"education","lineage":["https://openalex.org/I56404289","https://openalex.org/I91357014"]},{"id":"https://openalex.org/I91357014","display_name":"Banaras Hindu University","ror":"https://ror.org/04cdn2797","country_code":"IN","type":"education","lineage":["https://openalex.org/I91357014"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Pratik Chattopadhyay","raw_affiliation_strings":["Department of Computer Science and Engineering, IIT (BHU) Varanasi, Varanasi, India"],"raw_orcid":"https://orcid.org/0000-0002-5805-6563","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, IIT (BHU) Varanasi, Varanasi, India","institution_ids":["https://openalex.org/I56404289","https://openalex.org/I91357014"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086764741","display_name":"Lipo Wang","orcid":"https://orcid.org/0000-0002-4257-7639"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Lipo Wang","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-4257-7639","affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103379503","display_name":"Yap\u2010Peng Tan","orcid":"https://orcid.org/0000-0002-0645-9109"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yap-Peng Tan","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.8258,"has_fulltext":false,"cited_by_count":113,"citation_normalized_percentile":{"value":0.9611879,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"5","issue":"3","first_page":"660","last_page":"675"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.9666815996170044},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.757370114326477},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6462552547454834},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5480397939682007},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5098801851272583},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48786377906799316},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.48367413878440857},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.47355809807777405},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4683128297328949},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4644275903701782},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3078983426094055}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.9666815996170044},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.757370114326477},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6462552547454834},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5480397939682007},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5098801851272583},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48786377906799316},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.48367413878440857},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.47355809807777405},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4683128297328949},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4644275903701782},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3078983426094055},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tcss.2018.2857473","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcss.2018.2857473","pdf_url":null,"source":{"id":"https://openalex.org/S2490693980","display_name":"IEEE Transactions on Computational Social Systems","issn_l":"2329-924X","issn":["2329-924X","2373-7476"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computational Social Systems","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/140631","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/140631","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Life in Land","score":0.4099999964237213,"id":"https://metadata.un.org/sdg/15"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":82,"referenced_works":["https://openalex.org/W91476413","https://openalex.org/W1497414364","https://openalex.org/W1500731913","https://openalex.org/W1534477342","https://openalex.org/W1542601440","https://openalex.org/W1559148916","https://openalex.org/W1563938718","https://openalex.org/W1572811218","https://openalex.org/W1859925930","https://openalex.org/W1909870529","https://openalex.org/W1965360433","https://openalex.org/W1967847731","https://openalex.org/W1969795119","https://openalex.org/W1975846642","https://openalex.org/W1976603832","https://openalex.org/W1982269267","https://openalex.org/W1984674851","https://openalex.org/W1993318811","https://openalex.org/W1995976200","https://openalex.org/W2001414359","https://openalex.org/W2005221715","https://openalex.org/W2008348094","https://openalex.org/W2013946142","https://openalex.org/W2018563407","https://openalex.org/W2025519999","https://openalex.org/W2030863907","https://openalex.org/W2051131064","https://openalex.org/W2058732827","https://openalex.org/W2076063813","https://openalex.org/W2081028405","https://openalex.org/W2096945460","https://openalex.org/W2097637261","https://openalex.org/W2097747115","https://openalex.org/W2097937682","https://openalex.org/W2104597806","https://openalex.org/W2107784880","https://openalex.org/W2109099170","https://openalex.org/W2112965356","https://openalex.org/W2113997717","https://openalex.org/W2118443964","https://openalex.org/W2119191234","https://openalex.org/W2123502857","https://openalex.org/W2124685890","https://openalex.org/W2136903812","https://openalex.org/W2138857742","https://openalex.org/W2139393465","https://openalex.org/W2139986471","https://openalex.org/W2144584907","https://openalex.org/W2147813562","https://openalex.org/W2148143831","https://openalex.org/W2150045644","https://openalex.org/W2151025459","https://openalex.org/W2158018156","https://openalex.org/W2159851400","https://openalex.org/W2170505850","https://openalex.org/W2171141701","https://openalex.org/W2293646452","https://openalex.org/W2397306716","https://openalex.org/W2411226021","https://openalex.org/W2495841828","https://openalex.org/W2911964244","https://openalex.org/W4205502210","https://openalex.org/W4230683138","https://openalex.org/W4231107646","https://openalex.org/W4250795209","https://openalex.org/W6629568988","https://openalex.org/W6633321415","https://openalex.org/W6633571703","https://openalex.org/W6634212809","https://openalex.org/W6639947007","https://openalex.org/W6641711544","https://openalex.org/W6650734280","https://openalex.org/W6663212300","https://openalex.org/W6674645192","https://openalex.org/W6676552757","https://openalex.org/W6680202767","https://openalex.org/W6680300913","https://openalex.org/W6680919041","https://openalex.org/W6681408236","https://openalex.org/W6682263846","https://openalex.org/W6683806324","https://openalex.org/W6696865510"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3186512740","https://openalex.org/W3083318772","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730"],"abstract_inverted_index":{"An":[0],"insider":[1,30,56,96,111,174,245],"threat":[2,31,57,97,112,175,246],"scenario":[3],"refers":[4],"to":[5,48,94,102,304],"the":[6,21,38,69,103,129,141,166,171,195,234,241,277,305],"outcome":[7],"of":[8,11,20,29,37,71,117,123,143,150,154,178,183,250],"a":[9,108,121,148,180,188,201,205,292,298],"set":[10,122,248,281],"malicious":[12,90,160,184],"activities":[13],"caused":[14],"by":[15,229],"intentional":[16],"or":[17,75,161],"unintentional":[18],"misuse":[19],"organization's":[22],"systems,":[23],"networks,":[24],"data,":[25],"and":[26,211,222,262,272,286,301],"resources.":[27,51],"Prevention":[28],"is":[32,87,126,137,163,240],"difficult,":[33],"since":[34],"trusted":[35],"partners":[36],"organization":[39],"are":[40,227],"involved":[41],"in":[42,78],"it,":[43],"who":[44],"have":[45],"authorized":[46],"access":[47],"these":[49],"confidential/sensitive":[50],"The":[52,152],"state-of-the-art":[53],"research":[54],"on":[55,61],"detection":[58,66,113],"mostly":[59],"focuses":[60],"developing":[62],"unsupervised":[63],"behavioral":[64],"anomaly":[65],"techniques":[67],"with":[68,215,256,282],"objective":[70],"finding":[72],"out":[73],"anomalousness":[74],"abnormal":[76],"changes":[77],"user":[79,118,130],"behavior":[80],"over":[81,147],"time.":[82,151],"However,":[83],"an":[84,95,100],"anomalous":[85],"activity":[86,131],"not":[88],"necessarily":[89],"that":[91,193,268],"can":[92],"lead":[93],"scenario.":[98],"As":[99,200],"improvement":[101],"existing":[104],"approaches,":[105],"we":[106,186,203],"propose":[107],"technique":[109,192],"for":[110],"from":[114,128,140,165,297],"time-series":[115,134,156,279],"classification":[116],"activities.":[119],"Initially,":[120],"single-day":[124,145],"features":[125],"computed":[127],"logs.":[132],"A":[133],"feature":[135,146,157,280],"vector":[136,158],"next":[138],"constructed":[139],"statistics":[142],"each":[144,155],"period":[149],"label":[153],"(whether":[159],"nonmalicious)":[162],"extracted":[164],"ground":[167],"truth.":[168],"To":[169],"classify":[170,276],"imbalanced":[172],"ground-truth":[173],"data":[176,190,247],"consisting":[177,249],"only":[179,242],"small":[181],"number":[182],"instances,":[185],"employ":[187,204],"cost-sensitive":[189],"adjustment":[191],"undersamples":[194],"nonmalicious":[196],"class":[197],"instances":[198],"randomly.":[199],"classifier,":[202],"two-layered":[206],"deep":[207,270],"autoencoder":[208,271],"neural":[209],"network":[210],"compare":[212],"its":[213],"performance":[214],"other":[216,306],"popularly":[217],"used":[218],"classifiers:":[219],"random":[220,273],"forest":[221,274],"multilayer":[223,289],"perceptron.":[224],"Encouraging":[225],"results":[226],"obtained":[228],"evaluating":[230],"our":[231],"approach":[232],"using":[233],"CMU":[235],"Insider":[236],"Threat":[237],"Data,":[238],"which":[239],"publicly":[243],"available":[244],"about":[251],"14-GB":[252],"web-browsing":[253],"logs,":[254],"along":[255],"logon,":[257],"device":[258],"connection,":[259],"file":[260],"transfer,":[261],"e-mail":[263],"log":[264],"files.":[265],"We":[266],"observe":[267],"both":[269],"classifiers":[275],"dataadjusted":[278],"high":[283,293],"precision,":[284],"recall,":[285,294],"f-score.":[287],"Although":[288],"perceptron":[290],"has":[291],"it":[295],"suffers":[296],"lower":[299],"precision":[300],"f-score":[302],"compared":[303],"two":[307],"classifiers.":[308]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":20},{"year":2023,"cited_by_count":20},{"year":2022,"cited_by_count":16},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":8},{"year":2018,"cited_by_count":3}],"updated_date":"2026-07-16T13:24:37.021932","created_date":"2025-10-10T00:00:00"}